Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: ay00UMNw9ogKP2y2jwd3QdXd4VDrkE9F36GjnLrKWDc=
Subject key identifier: 6B:E2:17:DE:83:30:25:5E:46:2E:28:E5:A6:D1:67:27:57:A7:87:E5
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019CABD9E67AD13F8F9FD005BBC80CBF2573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0F00
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: qujdwm7fvL7l77m2DHW/KGOoFghkgcWeP174vveq3rQ=)
2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e6:7a:d1:3f:8f:9f:d0:05:bb:c8:0c:bf:25:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=6be217de8330255e462e28e5a6d1672757a787e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:d4:63:b7:55:cd:a1:b9:66:34:9a:b0:e5:
d6:41:e4:60:68:f9:9d:f1:30:b8:19:8f:5e:a2:b1:
76:66:28:fe:d8:20:90:d5:9a:5e:23:e5:b4:cd:80:
09:e7:9a:7e:71:ba:4a:20:d7:3f:60:e1:60:03:72:
94:1d:c7:2e:f4:b2:38:73:60:5a:25:29:f6:87:57:
4b:f1:38:d2:24:39:5a:05:f2:ff:78:81:18:a6:48:
89:88:a8:ab:e3:8c:06:fb:8a:e2:02:b3:c1:76:ce:
7b:d4:db:9c:c0:58:0d:9f:c8:fe:64:cf:02:de:ca:
87:b9:95:5f:e6:82:4a:d9:fc:cc:a3:72:4f:d7:72:
9e:68:af:f7:2a:51:27:3e:af:3d:ba:89:be:80:f3:
42:23:5f:5f:e2:35:dc:e3:d6:67:be:02:40:52:c3:
fe:37:28:8e:e0:5e:87:23:bb:23:0a:56:59:e5:3b:
39:6f:16:b1:e3:e1:6b:c6:cd:79:f0:3e:c0:3a:04:
16:61:06:99:38:d9:14:8a:7c:ff:cc:51:41:d4:f0:
98:51:03:52:63:8d:5a:96:5e:3b:c4:fb:64:cb:7f:
2f:36:86:78:44:40:8c:34:83:b3:3d:cc:b7:f9:60:
39:f8:28:ac:c4:1a:36:ce:00:e5:c2:30:6f:3c:aa:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:17:DE:83:30:25:5E:46:2E:28:E5:A6:D1:67:27:57:A7:87:E5
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:28:e1:9a:7b:93:f4:c6:c8:84:dd:83:70:27:7d:d7:47:0e:
7b:7e:85:81:0d:d3:88:f6:14:9f:7e:08:36:9f:58:c6:4c:f8:
3f:8e:a8:63:ae:2b:f0:66:28:40:49:37:fd:0d:9e:a5:d5:f2:
02:03:9a:a1:84:46:ef:f8:8a:ab:1c:a3:1e:83:59:73:7e:92:
38:38:2a:5d:76:36:cc:13:19:17:2d:1f:98:5e:63:5e:fe:b5:
2d:8e:da:ea:22:3e:f1:fb:eb:4a:04:3c:59:7f:d1:45:ba:2e:
18:da:df:cd:34:0c:50:da:24:b9:66:ce:3f:8b:5d:57:3f:67:
54:5e:44:76:a1:65:df:42:37:87:68:07:b3:a9:8f:28:20:07:
fa:98:f7:22:f3:55:43:6c:d5:c9:7e:ea:b1:da:cb:aa:ee:1d:
d9:2e:e9:59:c1:e8:ef:f6:0e:18:12:1d:52:86:83:be:a9:9e:
ae:d0:49:2d:e2:49:b0:51:66:b1:0f:bf:c4:8f:e2:36:71:d1:
4b:c5:37:09:cc:9a:13:5e:0f:f2:d9:35:17:fb:4e:2c:9c:0d:
ce:00:ea:e4:2a:44:1c:1b:e2:ce:47:9b:f7:0b:21:66:4e:cd:
0e:0b:1e:b0:74:9e:e8:b0:25:0b:e1:af:db:50:fd:5b:9a:7b:
4d:0d:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:28 2026 by rpki-client